RHSA-2011:0266: Low: fence security, bug fix, and enhancement update

First published: Wed Feb 16 2011(Updated: )

The fence package allows failed or unreachable nodes to be forcibly<br>restarted and removed from a cluster.<br>Insecure temporary file use flaws were found in fence_egenera, fence_apc,<br>and fence_apc_snmp. A local attacker could use these flaws to overwrite an<br>arbitrary file writable by the victim running those utilities via a<br>symbolic link attack. (CVE-2008-4192, CVE-2008-4579)<br>This update also fixes the following bugs:<br><li> fence_apc_snmp now waits for five seconds after fencing to properly get</li> status. (BZ#494587)<br><li> The fence_drac5 help output now shows the proper commands. (BZ#498870)</li> <li> fence_scsi_test.pl now verifies that sg_persist is in the path before</li> running. (BZ#500172)<br><li> fence_drac5 is now more consistent with other agents and uses module_name</li> instead of modulename. (BZ#500546)<br><li> fence_apc and fence_wti no longer fail with a pexpect exception.</li> (BZ#501890, BZ#504589)<br><li> fence_wti no longer issues a traceback when an option is missing.</li> (BZ#508258)<br><li> fence_sanbox2 is now able to properly obtain the status after fencing.</li> (BZ#510279)<br><li> Fencing no longer fails if fence_wti is used without telnet. (BZ#510335)</li> <li> fence_scsi get_scsi_devices no longer hangs with various devices.</li> (BZ#545193)<br><li> fence_ilo no longer fails to reboot with ilo2 firmware 1.70. (BZ#545682)</li> <li> Fixed an issue with fence_ilo not rebooting in some implementations.</li> (BZ#576036)<br><li> fence_ilo no longer throws exceptions if the user does not have power</li> privileges. (BZ#576178)<br>As well, this update adds the following enhancements:<br><li> Support has been added for SSH-enabled RSA II fence devices. (BZ#476161)</li> <li> The APC fence agent will now work with a non-root account. (BZ#491643)</li> All fence users are advised to upgrade to this updated package, which<br>corrects these issues and adds these enhancements.<br>

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/severity
• agent/type
• agent/event
• agent/softwarecombine
• agent/last-modified-date
• agent/first-publish-date
• agent/references
• agent/title
• agent/remedy
• agent/tags
• agent/description
• collector/redhat-errata
• source/Red Hat
• anchor-id/RHSA-2011:0266